Access is Denied

I keep receiving Access Denied errors when I am trying to reset a password. I have created a service account for the password management tasks and have followed the Rights settings as defined here: http://www.netwrix.com/kb_n5c2_9XHH

Also, I have my PM setup to email me and the error I get in the Email looks like this:
Account Name: DOMAIN\user
Date: 11/26/2012 2:23:50 PM
Result: Access is denied
Performed by: NT AUTHORITY\IUSR

However, I consistently get Access Denied, unless I make the account a Domain Admin, which I don't want to do. What am I missing here?

Can you please clarify the situation?
Does the access denied error occur for all users or only for several?

The thing is that less privileged service account is not able to unlock and reset passwords for privileged groups (domain admins, enterprise admins, etc) because of AdminSDHolder mechanism. You can find more information about it here: http://blogs.technet...and-sdprop.aspx

As a test, can you please create a new regular user which is a member of only Domain Users group and try it?

I am also facing same issue please help to understand me actual issue as it was working fine from last couple of months and suddenly getting this issue.

You are not the only one , i've had similar problems when recover Windows password ,i think we should try some simple methods,like the Ophcrack, uukeys, iseepassword , because some complicated schemes can lead to mistakes ,

Access denied mostly is caused by lack of permissions of Password Manager service account which are necessary while performing an operation(eg password change) on an user account.

Basically it can be simply identified assigning domain admins rights to Password Manager service account, if the error is no more appeared, the next step review "4.3. Configuring Service Account Permissions" of "NETWRIX PASSWORD MANAGER ADMINISTRATOR’S GUIDE" and make sure all necessary permissions are in place.